• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 661
  • Last Modified:

getting lots of kernel: martian source errors in my message log

I have a linux box that is getting lots of errors ( i assume they are errors) in the message log file

they all come from one source
Jan  4 11:29:54 millhouse kernel: martian source from 216.xxx.xxx.xxx, on dev eth1
Jan  4 11:29:54 millhouse kernel: ll header: ff:ff:ff:ff:ff:ff:00:xx:xx:xx:xx:xx:xx:xx

any help on how to debug this?

1 Solution
The error is telling you that an external IP 2156.xxx.xxx.xxx is reporting itself as an rfc1918 type address i.e. which is not routable so cannot possibly be honest - i.e. it's being spoofed (from Mars or another planet...).  
I think the error comes from iptables, and you may be able to disable it in your iptables config
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now